IAM Engineer

Role Name IAM Engineer
Location Atlanta, GA (Onsite)
Job Type: Contract

This role will be responsible for executing the end to end IAM assessment across cloud, on prem, and third party identity platforms. This role focuses on technical evaluation, control analysis, maturity assessment, and risk identification, ensuring IAM capabilities align with security best practices, regulatory expectations, and business needs.

Key Responsibilities
IAM Assessment & Analysis
" Conduct detailed technical assessments across:
o Azure Entra  (Azure AD) authentication, conditional access, MFA, PIM, identity governance
o AWS IAM roles, policies, permissions boundaries, federation, least privilege
o On Prem Active Directory (ADUC) group design, privileged access, GPOs, AD hygiene
o Cyber Ark PAM controls, vaulting, session management, privileged workflows
o PingID authentication flows, MFA enforcement, integrations
o SailPoint identity lifecycle management, access certifications, role modeling
" Evaluate current IAM architecture against industry standards (e.g., Zero Trust, least privilege, NIST/ISO concepts).
" Identify control gaps, design weaknesses, and security risks.

Control & Process Evaluation
" Assess identity lifecycle processes: joiner, mover, leaver (JML).
" Review access request, approval, provisioning, recertification, and de provisioning processes.
" Assess MFA, SSO, federation, and password policies.
" Evaluate privileged access controls and segregation of duties (SoD).

Risk & Recommendations
" Document IAM risks with clear impact and likelihood.
" Provide actionable remediation recommendations (short term and long term).
" Define IAM maturity levels and target state architecture.
" Align recommendations with business priorities and regulatory expectations.

Required Skills & Experience
" 8+ years of experience in Identity & Access Management
" (Preferable) Strong hands on expertise with:
o Azure Entra  (Azure AD)
o AWS IAM
o Active Directory (ADUC)
o Cyber Ark PAM
o PingID
o SailPoint (IIQ or ISC)
" Strong understanding of:
o Zero Trust Architecture
o Privileged Access Management
o Identity Governance & Administration (IGA)

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.